list_del corruption. next->prev should be ffff888079731478, but was 0000000000000000. (next=ffff88807afc05c8) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:62! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 3681 Comm: kworker/u4:5 Not tainted 6.0.0-syzkaller-02770-g79d878f7ad8e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 Workqueue: netns cleanup_net RIP: 0010:__list_del_entry_valid.cold+0x70/0x72 lib/list_debug.c:62 Code: f0 ff 0f 0b 4c 89 ea 48 89 ee 48 c7 c7 40 54 49 8a e8 a7 ec f0 ff 0f 0b 4c 89 e9 48 89 ee 48 c7 c7 80 55 49 8a e8 93 ec f0 ff <0f> 0b 83 c3 01 b8 ff ff 37 00 89 1d e8 20 e8 07 48 c1 e0 2a 65 48 RSP: 0018:ffffc9000476fb48 EFLAGS: 00010286 RAX: 000000000000006d RBX: ffff888079731458 RCX: 0000000000000000 RDX: ffff88807b568000 RSI: ffffffff8160f6f8 RDI: fffff520008edf5b RBP: ffff888079731478 R08: 000000000000006d R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000000 R12: ffff8880797315c8 R13: ffff88807afc05c8 R14: ffff888079731480 R15: fffffbfff1861da8 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a5706b9130 CR3: 0000000025ae0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __list_del_entry include/linux/list.h:134 [inline] list_del include/linux/list.h:148 [inline] unregister_shrinker mm/vmscan.c:736 [inline] unregister_shrinker+0x83/0x2f0 mm/vmscan.c:730 nfsd_reply_cache_shutdown+0x22/0x280 fs/nfsd/nfscache.c:210 nfsd_exit_net+0x110/0x4c0 fs/nfsd/nfsctl.c:1479 ops_exit_list+0xb0/0x170 net/core/net_namespace.c:162 cleanup_net+0x4ea/0xb00 net/core/net_namespace.c:594 process_one_work+0x991/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__list_del_entry_valid.cold+0x70/0x72 lib/list_debug.c:62 Code: f0 ff 0f 0b 4c 89 ea 48 89 ee 48 c7 c7 40 54 49 8a e8 a7 ec f0 ff 0f 0b 4c 89 e9 48 89 ee 48 c7 c7 80 55 49 8a e8 93 ec f0 ff <0f> 0b 83 c3 01 b8 ff ff 37 00 89 1d e8 20 e8 07 48 c1 e0 2a 65 48 RSP: 0018:ffffc9000476fb48 EFLAGS: 00010286 RAX: 000000000000006d RBX: ffff888079731458 RCX: 0000000000000000 RDX: ffff88807b568000 RSI: ffffffff8160f6f8 RDI: fffff520008edf5b RBP: ffff888079731478 R08: 000000000000006d R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000000 R12: ffff8880797315c8 R13: ffff88807afc05c8 R14: ffff888079731480 R15: fffffbfff1861da8 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a5706b9130 CR3: 000000007f9a0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400